diff --git a/editor/js/Sidebar.Scene.js b/editor/js/Sidebar.Scene.js
index dfb4c8ee72ae938791f7e734ec81f510eb9b9e17..363f9b6720245933c56a963c5f5bd4b3217ae002 100644
--- a/editor/js/Sidebar.Scene.js
+++ b/editor/js/Sidebar.Scene.js
@@ -12,6 +12,17 @@ Sidebar.Scene = function ( editor ) {
// outliner
+ function escapeHTML( html ) {
+
+ return html
+ .replace( /&/g, '&' )
+ .replace( /"/g, '"' )
+ .replace( /'/g, ''' )
+ .replace( //g, '>' );
+
+ }
+
function buildOption( object, draggable ) {
var option = document.createElement( 'div' );
@@ -45,15 +56,15 @@ Sidebar.Scene = function ( editor ) {
function buildHTML( object ) {
- var html = ' ' + object.name;
+ var html = ' ' + escapeHTML( object.name );
if ( object instanceof THREE.Mesh ) {
var geometry = object.geometry;
var material = object.material;
- html += ' ' + geometry.name;
- html += ' ' + getMaterialName( material );
+ html += ' ' + escapeHTML( geometry.name );
+ html += ' ' + escapeHTML( getMaterialName( material ) );
}